Grouper Users - Open Discussion List

["Bryan E. Wooten" <>]

Thanks for the help.

I was able to edit the grouper.properties file and get the wheel group to appear. I was also able to edit sources.xml and I am able to see my data source in the search page in the web app. My data source is an OpenDJ LDAP.

However when I search after selecting my data source I don't get any results or error message. I tried going through all the logs in tomcat and under grouper/grouper.api-2.1.2 but I can't find any obvious errors or exceptions.

I am not sure how to proceed to diagnose this problem.

Thanks,

Bryan

On Dec 3, 2012, at 11:20 AM, Chris Hyzer wrote:

This is the primary and used for GSH:

./grouper.apiBinary-2.1.2/conf/sources.xml

 

That should be in sync with the WS and UI ones…  I think the installer uses these for the tomcat webapp dir mapping…

./grouper.ws-2.1.2/grouper-ws/build/dist/grouper-ws/WEB-INF/classes/sources.xml

./grouper.ui-2.1.2/dist/grouper/WEB-INF/classes/sources.xml

 

 

Thanks,

Chris

 

From:  [mailto:] On Behalf Of Bryan E. Wooten
Sent: Monday, December 03, 2012 1:02 PM
To: 
Subject: [grouper-users] Re: Brand new to Grouper / Need direction and advice

 

Ok, I have made changes to grouper/grouper.apiBinary-2.1.2/conf/grouper.properties to enable wheel groups.

 

I am now trying set up a connection to a subject source (LDAP)(https://spaces.internet2.edu/display/Grouper/Grouper+book+-+Connecting+to+a+subject+source),

so I need to modify the sources.xml file.  But which sources.xml?

 

[root@idm-6 grouper]# find ./ -name sources.xml

./grouper.ws-2.1.2/grouper-ws/build/dist/grouper-ws/WEB-INF/classes/sources.xml

./grouper.ui-2.1.2/build/grouper/WEB-INF/classes/sources.xml

./grouper.ui-2.1.2/dist/grouper/WEB-INF/classes/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap-multiple/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-tivoli/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-active-directory/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-openldap-memberof-overlay/sources.xml

./grouper.psp-2.1.2/conf/psp-example-ldap-to-grouper/sources.xml

./grouper.psp-2.1.2/conf/psp-example-grouper-to-ldap/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap-multiple/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-tivoli/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-active-directory/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-openldap-memberof-overlay/sources.xml

./grouper.apiBinary-2.1.2/conf/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-ldap-to-grouper/sources.xml

./grouper.apiBinary-2.1.2/conf/psp-example-grouper-to-ldap/sources.xml

[root@idm-6 grouper]#

 

Thanks for any help,

 

-Bryan

 

 

On Nov 30, 2012, at 11:06 AM, Chris Hyzer wrote:

First question, I can login into the UI using the Grouper System account, but I don't like the password I chose at install time. How can I change it?

Should be in tomcat conf dir, tomcat-users.xml

 

I want to add "wheel group" members (subjects?) that have Grouper System privileges. How do I do that?

Does your grouper.properties have a wheel group enabled?  First thing is to do that.

Then you need to make sure your subjects are resolvable, either add them via GSH or SQL to the built in JDBC source, or add another source.

Then add those subjects to the group configured in grouper.properties.  You can do this via UI or GSH or client or WS

 

How do I stop and start the Grouper daemons? And the HSQL DB?

For daemons, you need to kill the process which is gsh -loader.  For starting, see the output from your installer script.  Generally you just find the gsh command, and run that: gsh -loader   for Linux, you could do this: nohup gsh -loader &

 

My end goal is to be able to manage AD groups using Grouper, what is the next step I should take?  

Should I load AD group information into Grouper or should I be creating groups in Grouper and then

use PSP to push the group information out to AD?

Well, do you want the system of record to be in Grouper or AD?  Are all subjects that go into groups in AD available in Grouper?  You can do the sync either way or both.  Maybe you want to mark groups to go to AD with an attribute, and you can configure which groups come back in the PSP or loader config (depending on which one you use)

Thanks,
Chris